CVE-2023-35833
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk20th percentile - higher than 20% of all known CVEs
Summary
An issue exists in YSoft SAFEQ 6 Server before version 6.0.82 related to modifying the LDAP server configuration URL. Changing from LDAPS to LDAP does not require re-entering the password, leading to the exposure of cleartext credentials.
Risk Assessment
Organizations may be vulnerable to attacks where a rogue LDAP server can capture administrator credentials. The requirement for admin access to change the configuration mitigates the risk but does not eliminate it entirely.
Recommendation
It is recommended that administrators avoid changing LDAP configurations without appropriate safeguards and use LDAPS connections to protect credentials.
Original NVD description (English source)
An issue was discovered in YSoft SAFEQ 6 Server before 6.0.82. When modifying the URL of the LDAP server configuration from LDAPS to LDAP, the system does not require the password to be (re)entered. This results in exposing cleartext credentials when connecting to a rogue LDAP server. NOTE: the vendor originally reported this as a security issue but then reconsidered because of the requirement for Admin access in order to change the configuration.